$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bca413bd-7320-44f7-a129-8a68742a9485.roa File: bca413bd-7320-44f7-a129-8a68742a9485.roa (raw, json) Hash identifier: ahWx5Z2NldQs1zAjX4sDbKG+ixcHcvn3kIyptZl9Iaw= Subject key identifier: 65:72:EC:8F:6E:D0:D9:2A:D4:4A:1D:28:95:61:C8:73:42:0C:F6:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40F76380466A2F8AB08E05647B0D9E2AC8F1DD5D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bca413bd-7320-44f7-a129-8a68742a9485.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f7:63:80:46:6a:2f:8a:b0:8e:05:64:7b:0d:9e:2a:c8:f1:dd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ae76b5397544f0b0c587239410657a0c40a7fffe10dcbaeb9087a2f7b8aa205b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:76:63:36:e6:d1:3e:28:84:31:35:1f:3f: b1:19:cc:9d:ad:74:25:1b:5d:7a:a3:19:6e:4d:26: c7:0e:e5:5a:71:1c:e3:a3:95:03:9b:ca:09:36:0d: 5f:39:0c:2e:34:50:67:42:17:8c:8d:00:11:27:77: 98:ee:6a:cb:ba:4e:77:d2:8b:97:ad:0d:43:0a:5e: 5c:d3:5c:4c:b7:4f:22:f7:12:82:dd:b5:f5:a4:26: a9:93:c0:e8:51:ec:02:78:c4:7f:7c:8d:9e:36:f8: 90:73:95:5c:be:11:fc:5f:bf:c2:7a:5d:fa:e8:22: 40:4d:ad:1c:6a:e7:b5:0c:5f:37:21:f6:54:04:57: 5a:54:80:41:f7:e9:66:5f:7e:28:a6:0f:d9:62:9a: cc:11:e6:2f:db:34:95:15:87:38:55:00:d1:9c:d0: 14:90:13:a2:97:af:6c:4c:73:f8:54:d9:a8:d9:9a: 48:76:1e:32:fa:08:ea:44:20:7e:0f:b1:ab:33:e7: 3d:b2:6b:67:91:4c:01:79:85:10:98:c8:5c:bb:71: e1:ee:78:9e:23:13:1d:9b:e3:2b:a7:32:50:68:fe: 34:2b:73:78:9b:9d:ba:43:f0:c6:07:b7:ff:de:06: ff:f9:b2:53:0c:8e:6c:90:76:d3:f0:20:8c:41:dd: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:EC:8F:6E:D0:D9:2A:D4:4A:1D:28:95:61:C8:73:42:0C:F6:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bca413bd-7320-44f7-a129-8a68742a9485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4004::/48 Signature Algorithm: sha256WithRSAEncryption 3c:c6:19:b6:08:9f:ca:00:bf:ef:fa:63:31:54:1e:c6:16:d4: f4:9a:d8:40:8d:be:a2:c3:8b:00:ba:09:9c:20:31:ef:30:7b: e9:0c:d0:c0:06:b7:00:a1:4c:d6:1a:d1:15:38:78:0a:cb:09: 1e:37:12:0b:52:06:bf:9a:0c:ec:09:db:db:6a:93:1b:1c:88: fa:86:1b:bf:cc:f4:5c:d7:10:14:ee:d4:98:4a:a0:d1:48:3b: 04:de:28:4a:7b:53:5e:79:27:0e:e8:ed:6d:35:be:37:f5:fa: d0:c4:b3:f1:f3:ca:fb:8b:fc:ec:5b:79:72:79:81:99:01:96: 25:ca:9f:d4:d0:7f:e7:16:c1:59:73:ba:7d:26:ba:94:f8:13: 1c:08:42:96:e4:9d:46:08:df:f3:8d:4f:cb:1b:2f:0f:c9:a4: d0:25:61:c1:9e:b9:87:cf:53:fd:3c:0c:22:26:f1:9e:18:d2: 2f:3e:e7:5e:d6:37:a1:be:41:1e:5d:9e:b9:2c:56:34:d3:40: f2:08:4d:3d:aa:6b:41:ee:6b:52:ab:e4:1f:64:59:3b:02:21: 02:64:51:dd:34:94:1e:d3:fe:7e:85:43:7c:27:0d:79:9a:07: 85:62:de:d9:99:2b:a7:ed:3a:07:1b:b5:75:03:c8:36:34:cb: 9c:57:4c:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQPdjgEZqL4qwjgVkew2eKsjx3V0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTc2YjUzOTc1NDRmMGIwYzU4NzIzOTQxMDY1N2EwYzQw YTdmZmZlMTBkY2JhZWI5MDg3YTJmN2I4YWEyMDViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjp3ZjNubRPiiEMTUfP7EZzJ2tdCUbXXqjGW5NJscO5Vpx HOOjlQObygk2DV85DC40UGdCF4yNABEnd5juasu6TnfSi5etDUMKXlzTXEy3TyL3 EoLdtfWkJqmTwOhR7AJ4xH98jZ42+JBzlVy+Efxfv8J6XfroIkBNrRxq57UMXzch 9lQEV1pUgEH36WZffiimD9limswR5i/bNJUVhzhVANGc0BSQE6KXr2xMc/hU2ajZ mkh2HjL6COpEIH4Psasz5z2ya2eRTAF5hRCYyFy7ceHueJ4jEx2b4yunMlBo/jQr c3ibnbpD8MYHt//eBv/5slMMjmyQdtPwIIxB3Yi5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZXLsj27Q2SrUSh0olWHIc0IM9mMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjYTQxM2JkLTczMjAtNDRmNy1hMTI5LThhNjg3NDJhOTQ4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHQAQwDQYJKoZIhvcNAQELBQADggEBADzGGbYIn8oAv+/6YzFUHsYW 1PSa2ECNvqLDiwC6CZwgMe8we+kM0MAGtwChTNYa0RU4eArLCR43EgtSBr+aDOwJ 29tqkxsciPqGG7/M9FzXEBTu1JhKoNFIOwTeKEp7U155Jw7o7W01vjf1+tDEs/Hz yvuL/OxbeXJ5gZkBliXKn9TQf+cWwVlzun0mupT4ExwIQpbknUYI3/ONT8sbLw/J pNAlYcGeuYfPU/08DCIm8Z4Y0i8+517WN6G+QR5dnrksVjTTQPIITT2qa0Hua1Kr 5B9kWTsCIQJkUd00lB7T/n6FQ3wnDXmaB4Vi3tmZK6ftOgcbtXUDyDY0y5xXTBA= -----END CERTIFICATE-----Generated at Fri Sep 22 19:21:57 2023 by rpki-client on console-ams.rpki-client.org